Leak-site post naming ORA Group Information, captured by ThreatCluster

ORA Group Information

pear

Ransomware leak-site victim intelligence · EN

Data size
4.12 Tb
Posted
Jun 30, 2026
Country
France
Industry
Advertising Services

Summary

Written by ThreatCluster from victim profile, leak post

Pear claims 4.12 TB of data from ORA Group Information (groupe-ora.com, France) has been exfiltrated. The leak describes the content as including HR and recruitment records, internal documentation and source code. The leak post is published and identifies the victim as ORA Group Information, a French Advertising Services company.

Describes what the group claims on its leak site. A listing is not confirmation that a breach occurred.

Victim profile

Revenue
$7.1M
Domains
groupe-ora.com

What was taken

Specializing in retail and the point-of-sale experience

Data categories
Financial dataHR dataPIIEmailsDatabasesContracts

Leak-site images (2)

Images from the victim's leak listing. Thumbnails scraped from the onion page are blurred by default — click a thumbnail to view.

ThreatCluster capture
Logo featuring the word "ora" in lowercase letters, with the tagline "SOUND OF CRAFTERS" below it, set against a blue background.
onion leak page 11 KB